MC688930: Teams admin center: App centric management and changes to app permission policies

Announcement IDMC688930Published Date11-11-2023
ServicemicrosoftteamsLast Updated09-13-2024
CategoryPlan for changeExpiration Date12-30-2024
Roadmap ID151829Action Required by Date
TagsAdmin impact, New feature, User impact


Summary
                The message details updates on Teams admin center's App Centric Management (ACM) and app permission policies. ACM is paused until mid-October 2024, affecting tenants differently based on their migration phase. Phase 1 auto migration resumes mid-September, while Phase 2 offers a migration wizard and testing. Detailed documentation is provided, and the rollout occurs in three phases. No action is required for Phase 1 tenants currently.


More Information

App centric management (ACM) is on hold as of August 14, 2024, and will restart in mid-October (previously mid-September). Your experience during this hold will fall under one of the following, with Phases defined in detail below.

  • If your tenant has already been migrated to ACM, it will remain on ACM. The rest of this MC post is not applicable to your tenant.
  • If your tenant fell under the Phase 1 criteria of using only the Global app permission policy and no custom app permission policies, it will resume auto migration in mid-September.
  • If you do not have a draft currently saved, you will not be able to access ACM migration until the roll out restarts.

What is in Phase 2?

  • Migration wizard: a step-by-step guide to help you migrate the permission policies. You will be able to select which polities to migrate and designate users groups or individuals who should have access to the apps.
  • Testing and Validation: before finalizing the migration, you will have the opportunity to test and export your staged changes. You can use this to make side-by-side comparison with your current setup, ensuring everything is perfect before you proceed.
  • Duration: The migration process is designed to have no downtime for the end users and can take a few hours to complete. During the migration, your existing permission policies will remain in effect until the transition to app centric management completes.

App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to the Teams app store. Second, admins can manage apps for users, groups, or everyone in the organization. This feature replaces the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant.

When this will happen:

This feature will gradually roll out across three major phases.

Phase 1 (from late November 2023 to early November 2024 (previously late September) affects the tenants that use only the Global app permission policy and have no custom app permission policies. The app status from the permission policy and tenant settings will be migrated to preserve the admin intent. The migration will not affect the end users and their ability to use the apps. Admins may see the Manage apps page in a read-only mode for a short time.

Phase 2 (from late May 2024 to early November 2024 (previously late September)) affects the tenants that use both global and custom app permission policies. This phase will let the admin choose to migrate to app centric management by following a migration process that will change the existing app permission policies to app assignments in the new app centric model. The admins will have the choice to modify the apps that are assigned using the custom permission policies to be accessible to groups, if they want.

Phase 3 (early 2025) applies to the tenants that skipped the migration in phase 1 or 2. These tenants will be migrated automatically in this phase. More details to come as a follow up MC post.

How this will affect your organization:

Starting with this release, you can:

1.Manage Teams apps for selected set of users, groups or all users in the organization.

Manage Teams appsManage Teams apps

2.Set the default value for new apps published to Teams app store for each of the app types: Microsoft, third-party and custom apps.

Manage Teams apps

What you need to do to prepare:

No action needed for phase 1 tenants with Global permission policy only. More information will be provided for phase 2 and 3 tenants in a follow-up communication before launch.

Previous Post Next Post